On Tue, Dec 2, 2014 at 1:04 PM, David Woodhouse <dwmw2 at infradead.org> wrote: > So yeah, this looks like a sane approach. > Is it forbidden to set X-CSTP-DynDNS on a full-tunnel configuration? Not currently, but I should do it. By full tunnel I suppose you mean providing a defaultroute right?